Fridg privacy policy

Updated 11 October 2026

Fridg is a shopping list that keeps your lists on your own device. Some things have to leave it for the app to work - a product you search for, the lists you share - and this page lists all of them: what leaves your phone and why, what Fridg's server keeps, who else sees anything, what is never collected, and how you delete it. Fridg is made by innonova GmbH. The same policy is published at https://app.fridg.me/privacy.html.

What leaves your phone, and why

Without an account, your lists, your stores, what you have bought and your food preferences stay on your device. Everything below leaves only for the feature that needs it.

A product you search for or scan - the words you type into an add field, or the barcode you scan, go to the product database of Measur, innonova's food app, which Fridg shares, so it can show the matching packs with their photos. With them go your household's country - the food market in Settings, the one you picked or, on Automatic, the one worked out on your phone from your stores, its time zone or its language - your language and, on Automatic, your time zone, so the packs of your market come first. Nothing from your lists and nothing naming you or your account goes with it. On the website the search passes through Fridg's server; the installed apps ask Measur directly. A word in another language is translated on your phone, never sent anywhere to be translated.
The photo of a pack - loaded from the same product database, and kept on your phone once the pack is on a list or among what you usually buy, so the list shows it with no signal.
The barcodes on your lists, for prices - to show a pack's price and find the cheaper of your stores, the app asks Open Prices (prices.openfoodfacts.org, by Open Food Facts) for the prices of those barcodes, each at most once a day. Only the barcodes go, never your stores, your lists or anything naming you, and the answers are kept on your phone for a day.
What you bought, when you tap Done - When you tap Done at a store that belongs to a chain, Fridg sends the barcodes of what you bought, the chain and your country to Measur, with a random number this app keeps, so it can learn which chains sell which products; it sends no name, email, address, store location or time. The random number is made for this alone: it is not your account, it is never synced and it is not shared with your household. A store you typed yourself, or a list of typed lines, sends nothing. On the website it passes through Fridg's server, which forwards only those four things.
Meal ideas, when you ask for them - When you ask for ideas of your own on Recipes, or tap Plan my week, the names of the things your household usually buys, the foods you said you like, avoid or are allergic to, and your household's country go to Anthropic, whose AI suggests dishes. Nothing else goes with them, except, if you use your Measur account in Fridg, your calorie budget for that meal and what you have eaten of it and of the day. The ask says which meal it is for and which language to answer in, and passes through Fridg's server, which counts the day's asks of each device by the random number the app keeps for it, in memory only, so that nobody can spend everyone's ideas. Dishes other people liked, and dishes suggested to others before, are asked with only the meal, the language, your household's country and the foods you avoid or are allergic to; when you search them, the words you typed go to Fridg's server in place of the meal, to be matched there and not kept. They are asked only when you open the ideas on Recipes, or search them there. Your household's country is the food market in Settings: the one you picked, or one worked out on your phone from your stores (or, with none, from your phone's time zone or language), never from your location. Fridg's server uses it to leave out dishes eaten only somewhere else, and keeps it no longer than the minute it reuses an answer for anyone asking alike, with nothing about who asked. With your ideas of your own, Plan my week and a recipe you name it goes on to Anthropic, so that the AI suggests dishes people there cook at home; Fridg's server keeps the ideas and the week's dinners with the country they were written for, with nothing about who asked, to offer them to others there. When you keep one of the dishes suggested to you, or plan it on a day, your phone tells Fridg's server its name and the language, so that the dishes people keep and plan most come first among those other people liked. The server counts per day how often each of Fridg's own dishes was kept or planned, with no id and no IP address, and keeps those numbers for 90 days.
Ideas for the whole household - When you ask for ideas for the whole household, Fridg's server adds the foods everyone else in your household avoids or is allergic to, from their own food preferences, to what your ask sends the AI, with nothing that says whose they are. You are never sent their lists, only the dishes that leave those foods out.
A recipe you name - When you name a dish or a wish on Recipes and ask for its recipe, what you typed goes to Anthropic with the same things as an ask for ideas, and its AI writes one recipe for it. What you typed is not kept, and the recipe, like any dish the AI suggests, may be offered to others, with nothing about who asked. Fridg's server counts the day's asks of each device by the random number the app keeps for it, in memory only.
The dishes, kept and drawn - The dishes the AI suggests are kept on Fridg's server, with nothing about who asked, and offered again to others whose food preferences they fit. To leave out the ones you have seen, your phone sends their names with the ask, and they are not kept. Each dish's name and the names of its ingredients go to Measur, which draws its picture.
A recipe you paste or link to - When you save a recipe from its text or its link, the recipe's text goes through Fridg's server to Anthropic, whose AI sorts it into a meal for you to check. Nothing from your lists goes with it. For a link, your phone opens the page itself, the way a browser does, and sends on only the recipe it finds there: neither Fridg's server nor Anthropic ever opens the page, and the site sees what any visit sends it. For a post on Instagram, TikTok, Facebook or YouTube, your phone reads its caption (a YouTube video's description) from that site the same way (for a TikTok post the website does too), and when the caption holds no recipe, your phone first opens the page the caption links to, if it links one, the same way; only when that holds none either do the caption, its creator's name and the post's link go to Anthropic, whose AI searches the web once for the creator's own page of that recipe; your phone then opens that page itself. A recipe you keep keeps its link, so you can open the page again, and the address of the page's own photo of the dish, which your phone loads from that site to show it; for one with no photo, its name and the names of its ingredients go to Measur, which draws its picture. With an account they are copied with the meal to your household. Fridg's server counts the day's reads of each device by the random number the app keeps for it, in memory only.
Recipes from another app - When you import recipes from another app's export file, your phone reads the file itself: neither the file nor anything in it is sent anywhere, unless Translate recipes is on (below), and only the recipes you keep are kept, like any meal you keep. A recipe you keep keeps the link and the photo address the other app had saved for it, and your phone loads that photo from where it is to show it; for one with no photo, its name and the names of its ingredients go to Measur, which draws its picture when you first open it.
Translating recipes - When you turn on Translate recipes in Settings > Preferences, a recipe you save from its text, its link or a video is written in the language Fridg's screens are in by the same AI that reads it, in the same ask: only the name of that language goes with it. A recipe you import from another app's file that is not plainly in that language is sent when you keep it - its name, its ingredients and its method, nothing else from the file and nothing from your lists - through Fridg's server to Anthropic, whose AI translates it. Fridg's server counts the day's translations of each device by the random number the app keeps for it, in memory only.
Calories of a recipe - When you tap Count calories on a recipe you keep, its name, its ingredients, its method and how many it serves go through Fridg's server to Anthropic, whose AI works out the calories and protein of one serving. Nothing from your lists goes with it, and the recipe is not offered to anyone else. The numbers are kept with the recipe. Fridg's server counts the day's asks of each device by the random number the app keeps for it, in memory only.
A new version of a recipe - When you make a new version of a recipe you keep, its name, its ingredients, its method and how many it serves go through Fridg's server to Anthropic, whose AI works out each ingredient's calories and then, with what you asked to be different, writes the recipe again with your change. Nothing from your lists or your food preferences goes with it, and neither recipe is offered to anyone else. The new version is kept beside the recipe. Fridg's server counts the day's asks of each device by the random number the app keeps for it, in memory only.
The sound of a recipe video - When the caption of a post on Instagram, TikTok or Facebook holds no recipe, Fridg asks you once whether it may listen to the video. With your yes, your phone downloads the video, keeps only its sound and sends that through Fridg's server to OpenAI, whose AI writes down what is said; what was said then goes with the caption to Anthropic, whose AI finds the recipe in it so it can fill a meal. The picture never leaves your phone, and Fridg keeps neither the video nor its sound. You can take the yes back in Settings > Preferences.
A photo of a list, when you snap one - When you take or pick a photo in Snap a list, the photo and the language your app is in go through Fridg's server to Anthropic, whose AI writes down the shopping list in it. Nothing is sent until you choose a photo, and neither Fridg's server nor the app keeps a copy of it. What the AI read comes back as lines you tick, and nothing goes on your lists until you tap Put. Fridg's server counts the day's photos of each device by the random number the app keeps for it, in memory only.
A photo of a recipe, when you snap one - When you take or pick a photo in Snap a recipe, the photo - or the photos of one recipe's pages - and the language your app is in go through Fridg's server to Anthropic, whose AI writes down the recipe in it; with Translate recipes on, the name of the language to write it in goes too. Nothing is sent until you choose a photo, and neither Fridg's server nor the app keeps a copy of it. What the AI read comes back as a recipe for you to check, and nothing is kept until you tap Keep. Fridg's server counts the day's photos of each device by the random number the app keeps for it, in memory only.
What to use instead, in a store - When you tap Use instead on a line from a recipe in a store, the line, its amount, the names of the recipes it is for, the language your app is in and the foods you avoid or are allergic to go through Fridg's server to Anthropic, whose AI says what to use in its place. Nothing else from your lists goes with it. Fridg's server counts the day's asks of each device by the random number the app keeps for it, in memory only.
A recipe you share on Discover - When you share a recipe on Discover from Your recipes, signed in, its name, its lines, its servings, its steps (only for a recipe you say is yours; for one from a book or a site, where it is from instead), Fridg's drawing of it, the cuisine you pick and the name you go by on Discover go to Fridg's server, where everyone using Fridg can read them. Before it shows, Fridg's server sends its words to Anthropic, whose AI checks that it is a recipe and reads its language. It stays until you take it off Discover or delete your account; a recipe taken down after reports is deleted 30 days later. Discover's rules say what may be shared.
A recipe you save from a recipe page or a public post - When you keep a recipe you saved from a recipe page that publishes its recipe for search engines, or from a public post on Instagram, TikTok, Facebook or YouTube, its link, its name, its lines and the name of its creator or site go to Fridg's server and show on Discover, with nothing that names you: Fridg keeps only a scrambled number for you and the day, so one person counts once. Its words go to Anthropic once, to check that it is a recipe and read its cuisine. A page read as plain text, anything on a document or cloud host, and a recipe you pasted, photographed or imported never go. Settings > Preferences > Add recipes I save to Discover turns it off. Such a recipe is kept while someone still has it, and 90 days after the last one let it go.
Hearts, plans, ratings and reports on Discover - When you heart a recipe on Discover, keep it, plan it, rate it after cooking or report it, Fridg's server keeps a scrambled number for you (made from your account, or from a random number the app keeps when you are not signed in) and the day, with that recipe, so each person counts once; never your email, your account or your IP address. A report is kept until it is decided. Opening Discover sends that random number, or your account when you are signed in, so it can leave out the recipes you shared or saved yourself; nothing more is kept of it.
A check for a new version - the installed app asks Fridg's server whether a newer version is out. Nothing about you goes with it.
Ads for our own apps - Fridg shows ads only for innonova's own apps, such as Measur, and never through an ad network: your phone chooses whether to show one, and Fridg's server counts per day how often an ad was shown, tapped or closed, with no id and no IP address. An app already on your phone is never advertised to you; the installed app checks that on the phone, and the answer never leaves it. The ✕ on an ad hides it for a month, on that device.
Your lists, if you sign in - copied to Fridg's server so your other devices and the people you shop with see them, which the next section describes.
Your food preferences and language choices, if you sign in - copied to Fridg's server so your other devices have them, which the next section describes too.

What Fridg's server keeps

Without an account

Nothing that names you - Fridg works without an account, and never asks for one before you can make a list.
Searches made on the website, for an hour - the server keeps the product database's answer to a search for an hour, so the same search does not ask twice. It is kept by the words searched, not by who asked.
Your IP address, in memory - like every server, ours sees the address a request comes from. It is used to keep one caller from making too many requests, and it is never written down.
How many meal ideas, recipes named, week plans, pictures, recipe reads and photos of lists and recipes each device asked for today - a count per device, by the random number the app keeps, in memory only and forgotten the next day; the dishes others liked are kept for ten minutes, by the words asked, not by who asked.
How many AI asks were made each day - We count how many idea, recipe, photo and Use instead asks were made each day, with nothing about who asked. It is one number a day for each kind of ask, so we know what the AI costs us.
How often our ads were seen - one number a day for each ad and place: how often it was shown, tapped or closed. Nothing about who saw it is kept with the numbers. The same goes for the Fridg Pro plans: how often they were opened, from where, and how many were bought, on which plan.
The free ideas and recipes each device has had - With Fridg Pro switched on, the server counts the free list of ideas a day and the free recipes a week each device or account has had. It keeps only a scrambled number made from the device's random number or the account, never the number itself, and deletes each count after 8 days.

With an account

Signing in, in Settings > Account & data, creates an account on Fridg's server, and this is what it holds until you delete it.

Your email address - the one thing you type to sign in. There is no password: Fridg emails you a link instead, when you sign in, when a new device signs in, and before the account is deleted. Nothing else is sent to it - no newsletters, no marketing. Each email is written in the language your app is in, which the app says with each request; the server does not keep it.
Your household's lists - the stores, what is on each list, what is in each person's cart, what you have bought, the order you walk a store in, the recipes you keep with the link of one you saved, the collections you group them in, the meals you plan for the days ahead and how many you cook for, and the names of the dishes you said are not for you, as the app sends them. A meal you plan for a day is removed two weeks after that day. Nobody outside your household can read them, except a recipe you share on Discover, which everyone can read.
Your food preferences - Your food preferences are the foods you said you love or avoid, the foods you added yourself, your allergies and how closely meal ideas should stick to them. Without an account they stay on your device; signed in, they are kept with your account so your other devices have them, and nobody else, not even your household, is sent them. They leave your device only when Recipes asks for ideas or you search them, you ask Recipes for a recipe or you tap Plan my week, and the foods you avoid and your allergies also when someone in your household asks for ideas for the whole household, and when you tap Use instead in a store - for Fridg's server, and for Anthropic when its AI writes for you - and all of them for Measur whenever they change while you keep them in step with Measur.
Your Measur account - If you also use Measur, innonova's food app, with the same email address, you can tap Use my Measur account in Fridg. Once you are signed in with an address you confirmed, Fridg's server then asks Measur about that account, naming it by a one-way tag of the address, never the address itself, and Measur answers only while its own backup & sync is on. Your food preferences become one in both apps: a change you make in either is sent to the other. Fridg reads your calorie target, each of your meals' share of it, what you ate today in all and per meal, and your protein target, for today and the next 13 days, to size the dishes it suggests to what a meal still has; these numbers go to your phone, and with an ask for ideas to Measur, are shown to you alone and are not kept on Fridg's server. Every meal you plan in Fridg for the next 13 days goes into your Measur diary as planned, with its name, the lines of your serving with their calories and nutrients, and its method, unless you turn Send planned meals to Measur off. In a household, a planned meal goes the same way to every member who uses their own Measur account and has it on, each with their own serving; the household sees each one's servings, never their calories, and Fridg's server remembers which planned meal went to whom. The recipes you saved in Measur are copied once into your household's recipes, saying you brought them, and Measur then deletes its copy. Turning Use my Measur account off stops all of it; each app keeps what it has.
Your language choices - the language you picked for the app and the languages you type in, once you have picked them in Preferences. Without an account they stay on your device; signed in, they are kept with your account so your other devices have them, and nobody else, not even your household, is sent them.
A daily copy of those lists - before the first change of each day the server keeps a copy of the household's lists, the 14 newest, so a list deleted by mistake can be brought back.
Which devices are signed in - a one-way hash of each device's key, and of the key an iPhone hands Siri, which can only add to your lists, never the keys themselves.
The invitations you send - the address you invited and who invited it, until that person joins or declines, or the invitation is withdrawn. The link in the invitation mail is kept only as a one-way hash, and signs in by itself for a week.
Your subscription - If you subscribe to Fridg Pro, the server keeps which store you bought it in, which plan, until when, whether you are in its free week, and the store's number for the purchase (for Google Play, a scrambled fingerprint of it), as Apple or Google confirmed them. It is kept while your account exists and deleted with it. Fridg never sees your card or billing details: the store takes the payment.
Your free week plan - With Fridg Pro switched on, the server keeps a mark on your account once you have had your free Plan my week, and the day you had it, so the first plan is free only once. It is kept while your account exists and deleted with it; without an account, the mark stays on your device.
The server's log - names an account by a one-way tag of its address, never the address itself.

How it is kept safe

Encrypted on the way - everything the app sends travels over an encrypted connection (HTTPS).
No password to steal - every new device has to be confirmed from a link in your inbox, so knowing your address alone opens nothing.

Who else sees anything

The people in your household - everyone you share your lists with sees all of them, every member's email address, and whose cart a line is in, by the part of their address before the @. They never see your food preferences, though the ideas one of them asks for the whole household leave out the foods you avoid and your allergies. When someone in the household has Fridg Pro, everyone in it has it, and sees that it comes through the household, not who pays.
Someone you invite by email - gets an email with your address and the first part of each member's address. An invite link you share lets anyone who has it ask to join, once they have signed in with an address they confirmed; the household's owner can remove them, which also replaces the link.
Mailjet - the service that sends Fridg's emails receives the address and the mail. Their open and click tracking is switched off for every Fridg mail.
Measur - innonova's food app, whose product database Fridg shares. It receives the searches, scans, Done trips, recipes to read or price and dishes to draw described above, the one-way tag of your address when Fridg asks for the food preferences you set in Measur, and your food preferences while you keep them in step with Measur, and keeps no account, store name, address or time with a trip.
Anthropic - The company behind the AI that reads a recipe you save, translates it, works out its calories, searches the web for a post's own recipe page, writes the dishes Fridg suggests, a recipe you name, a new version of a recipe and what to use instead, reads a photo of a shopping list or of a recipe, and checks a recipe before Discover shows it. It receives the recipes, captions, photos and languages, as above, only when you save, translate, count, change or snap one, or snap a list, what an ask for dishes, a recipe named or what to use instead sends, as above, and the words of a recipe shared on or saved to Discover, and handles them under its commercial terms for businesses.
OpenAI - The company behind the AI that writes down what is said in a recipe video. It receives the video's sound, as above, only after your yes to listening, and handles it under its terms for businesses.
Apple and Google Play - You buy Fridg Pro from the App Store or Google Play, under their terms, and they take the payment. They tell Fridg the purchase, its plan and its dates, and to check an Android purchase Fridg's server asks Google Play about it. A store receives a random number made from your account, never your email address.
Open Prices - receives the barcodes it is asked about, as above, under Open Food Facts' privacy policy.
Nobody else - your data is never sold, never given to an ad network and never shared with anyone for their own purposes.

What is never collected

No trackers, no analytics, no ad networks - there is no advertising identifier and no third-party code watching what you do in the app. The only ads are for innonova's own apps, as above.
No location - your country is the one you pick in Settings, or one worked out from your stores, your phone's time zone or its language settings, and the app never asks for the location permission.
No pictures from the scanner - the scanner reads the barcode on your phone, and no picture of it leaves it. In the phone apps the reading is done by the phone's own scanner, Apple's on an iPhone and Google's ML Kit on Android, which may send Google anonymous figures about how the reader performs, never the picture. A photo leaves your phone only when you choose one for Snap a list or Snap a recipe, as above.
No recording of your voice - When you ask Siri to add to Fridg, Siri gives Fridg the words it heard, and they go on your lists as if you had typed them; signed in, they go through Fridg's server, which keeps them only until a device of your household has put them on the lists. Fridg never receives the recording, and Apple handles your voice under Siri's own terms.
No password - the account is your email address and the links sent to it.
No IP addresses on file - seen for the request, as above, and never written down.

Deleting your data, and asking us

On the phone - deleting the app, or the website's data in your browser, removes everything held on the device. Signing out keeps your lists on the device.
On the server - Settings > Account & data > Delete account removes your account from Fridg's server for good, after you confirm it from a link emailed to you, and signs out every device. If you were the last one in your household, its lists and their daily copies go with it; otherwise the others keep the shared lists. Your recipes on Discover, your name there, and your hearts, plans, ratings and reports go with the account. Leave, on the same page, stops sharing without deleting the account. A Fridg Pro subscription is the store's: deleting the account does not cancel it, so cancel it in your App Store or Google Play subscriptions.
Asking us - questions about any of this, or a request to see, correct or delete what we hold about you, reach a person at app@fridg.me.